350-201 Question 62
Select 3Your organization recently conducted a vulnerability assessment and identified several gaps in its security posture, including unpatched systems, lack of network segmentation, and insufficient logging. As a cybersecurity specialist, you have been tasked with evaluating the current security controls and recommending improvements. Which of the following actions would best address these identified gaps?
- A
Implement a patch management process to ensure timely updates for all systems.
- B
Deploy a network-based intrusion prevention system (IPS) to monitor for malicious activity.
- C
Segment the network based on business-critical assets and restrict lateral movement.
- D
Enable centralized logging and integrate it with a Security Information and Event Management (SIEM) solution.
- E
Conduct a penetration test to identify additional vulnerabilities beyond the assessment.
Show answer and explanation
Correct answers: A, C, D
Explanation
The identified gaps include unpatched systems, lack of network segmentation, and insufficient logging, which can be addressed through implementing a patch management process, segmenting the network, and enabling centralized logging with a SIEM, respectively. While deploying an IPS and conducting a penetration test are valuable cybersecurity practices, they do not specifically target the stated gaps.
- A. Correct.
Implementing a patch management process directly addresses the issue of unpatched systems by ensuring vulnerabilities are mitigated in a timely manner.
- B. Incorrect.
While deploying an IPS is beneficial, it does not directly resolve the identified gaps in network segmentation or insufficient logging.
- C. Correct.
Network segmentation improves security by isolating business-critical assets and limiting attackers' ability to move laterally, addressing the lack of network segmentation.
- D. Correct.
Centralized logging integrated with a SIEM enhances visibility and helps address the insufficient logging gap by enabling better detection and analysis of security events.
- E. Incorrect.
Conducting a penetration test may uncover additional vulnerabilities but does not directly address the identified gaps from the assessment.